Monitoring, review and change management of supplier services
A.5.22
-
Last updated
Applicable
Catalog reference
Regularly monitor, review, and audit supplier security practices and service delivery; manage changes to supplier services so security posture is not degraded over time.
Narrative — how we satisfy this requirement
Critical suppliers are reviewed every six months and the others every year, and a way to follow changes in a supplier's service between reviews is still being set up.